🧠 AI Assistant

Ask NAT anything about your API security testing. Here's how in 60 seconds.

Quick start — pick a command and go:

nat ai plan --spec openapi.yaml          # Generate a test plan
nat ai explain scan_001                  # Explain scan findings
nat ai compliance-report --framework owasp  # Generate compliance report

What can the AI Assistant do?

Capability	Command	What it does
Test Planning	`nat ai plan`	AI-generated test plans from your OpenAPI spec
Test Generation	`nat ai generate-tests`	Endpoint-specific test cases with priority ranking
Scan Interpretation	`nat ai explain`	Plain-English explanations of findings with remediation
Config Advisor	`nat ai configure`	Interactive `.natrc` configuration analysis
Compliance Reports	`nat ai compliance-report`	Audit-ready narratives for OWASP, PCI-DSS, HIPAA, SOC 2
Audit Trail	`nat ai audit-trail`	BGSTM 6-phase evidence mapping
Dashboard Chat	Web UI	Real-time Q&A about your scan results

AI Provider Support

NAT works with the providers your team already uses:

OpenAI (default) — uses NAT's built-in key for the free tier (5 queries/month)
Anthropic — bring your own Claude key
Ollama — run locally for air-gapped or privacy-sensitive environments
Azure OpenAI — use your existing Azure subscription

See AI Providers for full configuration details.

Dive deeper

🚀 Getting Started→📋 Test Planning→🧪 Test Generation→🔍 Scan Interpretation→⚙️ Config Advisor→📄 Compliance Reports→🗂️ Audit Trail→💬 Dashboard Chat→🔌 AI Providers→

Want to just scan? Quick Scan guide →

Was this helpful?

Getting Started